Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/7dSkP_ph9x_-FmkDymO9YMfmk8s.roa
File:                     7dSkP_ph9x_-FmkDymO9YMfmk8s.roa (raw, json)
Hash identifier:          1wjy9xwXjhF15ZB2eBfUYM6cxBXY7/JQuUQVn8MYPLI=
Subject key identifier:   ED:D4:A4:3F:FA:61:F7:1F:FE:16:69:03:CA:63:BD:60:C7:E6:93:CB
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       69
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/7dSkP_ph9x_-FmkDymO9YMfmk8s.roa
Signing time:             Sat 31 Aug 2024 01:34:02 +0000
ROA not before:           Sat 31 Aug 2024 01:34:02 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        111.234.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:02 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=EDD4A43FFA61F71FFE166903CA63BD60C7E693CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:14:91:dc:a4:e1:ae:5f:18:26:49:78:3c:
                    e8:7b:89:a1:20:78:d7:80:27:ca:69:ca:86:93:fc:
                    bd:e0:26:a0:90:4c:af:af:65:49:34:ac:e8:8e:02:
                    b9:8b:3d:4c:b6:11:9a:7f:ad:ee:d0:1c:6b:4a:4d:
                    1d:eb:dd:31:f4:18:ba:d3:35:29:0a:2f:62:58:2b:
                    b5:8d:ed:a3:de:f3:a7:69:94:c4:54:4e:1d:c3:0c:
                    be:d6:be:22:70:97:f7:b7:b4:00:0e:bb:5d:01:34:
                    a8:de:c1:c3:5e:05:11:e5:c7:b2:55:88:c5:29:20:
                    39:3b:31:f6:07:d6:f3:0c:22:04:f6:df:70:1e:e7:
                    a0:88:a3:94:18:e4:c1:85:b3:fa:a4:2b:85:8f:fe:
                    68:50:8e:98:8d:66:58:51:96:8b:c4:3c:ac:0b:71:
                    30:8e:5a:9d:96:78:87:75:c2:bd:8f:d1:89:18:52:
                    a3:c0:cd:fd:85:1d:ab:d0:27:cd:40:d5:8f:0a:b4:
                    9e:3b:b4:6b:21:4f:6d:6e:1b:78:c0:9a:74:bf:f9:
                    20:67:3c:47:76:0d:a3:e3:54:e3:3b:80:c2:0e:c9:
                    0f:04:64:15:5d:5b:ee:12:79:76:ba:de:f5:b5:e9:
                    d4:b0:17:45:5e:cc:08:f2:eb:f4:f4:b6:15:f8:d1:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:A4:3F:FA:61:F7:1F:FE:16:69:03:CA:63:BD:60:C7:E6:93:CB
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/7dSkP_ph9x_-FmkDymO9YMfmk8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:51:c4:0c:18:ca:0e:19:f2:27:f1:35:aa:20:7c:e7:ff:79:
         86:4f:1f:eb:b7:8a:de:c7:29:5b:ed:34:7e:db:e1:4d:c0:d3:
         c6:ae:38:dc:0a:f4:1d:84:47:b8:77:1c:5c:73:bc:f8:61:55:
         fa:57:14:fa:34:77:da:4f:82:0b:b1:2a:3e:56:b4:21:7f:a5:
         6f:db:09:7e:57:65:98:71:3c:e4:77:40:0c:0a:47:48:7e:15:
         f7:01:89:6b:70:11:d8:9f:25:26:cb:af:9d:e7:6f:4e:c8:3e:
         c4:7c:80:14:01:43:e6:38:e1:be:ed:40:ad:2e:70:b1:8b:ba:
         9a:e4:b5:fb:f4:d4:a0:f1:a6:de:f8:fc:44:11:5e:ea:42:20:
         7d:e8:05:e1:7c:e1:9c:85:fe:63:99:f6:5e:13:62:31:91:69:
         1b:11:e4:f3:2f:e1:b3:fc:b6:1f:39:fd:fc:5b:7b:c8:08:58:
         38:01:e9:7a:ee:3a:51:c2:7c:33:b7:0a:91:7f:fe:9a:9f:85:
         6b:3e:50:98:6c:40:41:f6:72:07:b2:b3:51:da:bf:06:53:ab:
         a5:83:98:f6:e4:03:4c:f8:b6:4a:8a:9b:09:2d:44:04:fa:a6:
         ad:b0:83:52:c8:27:6e:56:42:1a:7f:e9:5d:81:f7:0d:8a:a5:
         02:f1:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:22 2024 by rpki-client on console-fra.rpki-client.org